secedit rollback switch

[Darren D]

Hi, All
I am a bit confuse by the following command , perhaps someone can shead some
light on this..
Let say I run the following command on my server locally using the above
switch
e.g secedit /generaterollback /cfg test1.inf /rbk testrollback.inf
Would this result in creating a backup of my current server policy in the
file name called testrollback.inf, however I am a bit confused why the file
test1.inf was used in the command. Can someone explain what the above
commmand does..
Thanks
Darren

 

[Nick Finco [MSFT]]

The security template you supply as the /cfg parameter is used to describe
what settings to generate a rollback template for.

Ex. if you only wanted to snapshot your password policy settings, you would
create a template with all of the password policy settings defined (the
actual setting values don't matter) and supply that as the /cfg template.
The resulting /rbk template would only contain the current password policy
settings.

N